Yaswanth Reddy Sunkara

Unlimited Elements For Elementor < 2.0.21 - Authenticated Arbitrary File Write via Path Traversal

Motors < 1.4.124 - Listing Manager+ Stored XSS via Badge Color

Motors – Car Dealership & Classified Listings < 1.4.124 - Subscriber+ Cross-User Post Meta Modification via stm_make_featured

WP Directory Kit < 1.5.8 - Listing Admin+ Stored XSS via Category and Location Title and Icon Fields

Newsletters < 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure via IDOR

Visualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data Source

WP Directory Kit <= 1.5.7 - Editor+ SQL Injection via Elementor Category and Location Widget Settings

WP Directory Kit <= 1.5.7 - Contributor+ Non-Public Listing Field Disclosure via Shortcodes

Visualizer < 4.0.6 - Contributor+ Arbitrary Chart Deletion via deleteChart

Groundhogg < 4.7.2 - Open Redirect via 'redirect_to' Parameter